Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa9009c6-e724-390b-a54d-e0dcac9c1583.roa
File: fa9009c6-e724-390b-a54d-e0dcac9c1583.roa (raw, json)
Hash identifier: 7mrqPShvDfeR7qztEgxzmHT0OzRi5NEN9bsepWliW98=
Subject key identifier: D4:37:04:78:28:A3:A2:BB:7C:00:4A:16:34:19:BB:23:C1:80:39:07
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8666A2F7393B524D0738680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa9009c6-e724-390b-a54d-e0dcac9c1583.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.254.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:6a:2f:73:93:b5:24:d0:73:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=e7415215-0b05-4bab-b99a-9542c0f6b8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:d6:87:4b:85:97:a0:dc:26:51:4a:36:59:
99:42:c5:8e:fa:af:be:fc:be:af:1b:6c:60:22:df:
ee:54:94:db:af:bd:aa:95:15:e0:3a:a8:f8:8f:6f:
ac:35:6b:ed:da:13:f8:31:05:29:5b:a0:98:90:86:
9f:96:f4:fb:ca:24:2d:5d:ef:0e:2c:a9:d4:10:fb:
3a:fb:a5:d1:60:34:ed:e6:23:a2:dc:a3:66:18:fc:
3c:88:da:cb:27:ef:82:7e:97:ca:15:2a:9a:d4:80:
64:59:f6:f9:9b:24:a2:fc:44:ba:5c:4d:42:b1:b2:
a7:05:56:16:7b:d9:ea:c4:1e:0a:92:4b:c5:63:03:
0d:fd:6c:a0:08:ec:0b:60:eb:e4:60:f7:48:6e:3f:
32:69:1b:7d:06:0e:88:ee:d3:23:49:83:76:99:3f:
4b:58:fa:3e:49:1d:3b:69:bb:f2:78:b1:73:17:8d:
9a:7f:33:e9:d1:01:44:9b:86:27:bd:23:de:98:17:
f1:da:8c:5b:d9:0b:d1:00:89:44:c1:58:f8:21:6c:
e4:81:20:9f:f6:d9:07:1f:8b:ee:2b:d1:dc:b2:65:
cc:a7:24:c1:70:b3:a8:35:7d:e3:b1:0b:e7:57:bd:
02:05:c5:de:43:f2:d9:d0:67:e3:a8:cd:5c:a8:1b:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:04:78:28:A3:A2:BB:7C:00:4A:16:34:19:BB:23:C1:80:39:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa9009c6-e724-390b-a54d-e0dcac9c1583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.254.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:ed:38:d5:45:f4:f8:98:54:fb:cb:e4:07:00:54:6e:84:1a:
c7:2a:a5:34:99:e0:ed:e6:86:01:cf:2f:64:3a:da:cc:9f:c7:
ff:72:b7:8c:64:b1:4e:be:7b:b4:0e:b4:59:04:f3:08:c9:66:
ab:d0:04:a4:c2:89:ac:12:e1:b1:89:29:f8:20:f1:90:76:38:
80:d8:e4:7a:81:c5:f9:a3:06:e5:6a:9e:17:99:37:39:be:a1:
15:6e:af:5d:47:75:02:08:bd:26:37:ea:d5:f8:c2:46:d7:a4:
c9:75:f8:92:d8:fe:be:9f:d7:89:c4:52:73:5f:0a:26:41:e0:
2b:7e:b7:d2:0a:e2:f0:9d:dc:a3:cd:21:7a:c4:42:25:c7:46:
95:27:5e:e6:28:0f:51:e2:5c:02:ba:87:51:b3:31:9c:f8:e7:
64:06:7b:71:52:3f:9f:73:3e:89:5a:12:a2:de:93:1d:bd:7e:
d7:16:ac:12:c3:c7:fe:93:4d:2e:68:6b:b4:62:1e:c1:27:c8:
1e:b6:3d:e0:62:88:2b:73:59:00:cf:f5:b8:fa:95:14:67:4f:
85:a2:93:4d:28:b6:f8:ef:7f:d2:bf:5c:77:a3:05:02:dd:34:
19:d2:a6:98:f1:fd:52:28:f5:18:d5:2e:61:db:1a:6b:46:cd:
52:37:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:12 2025 by rpki-client